This role serves as the senior cybersecurity and DevSecOps lead responsible for integrating security, risk management, and compliance across data, AI, and software delivery efforts. The position ensures Government security requirements are translated into actionable engineering practices, oversees RMF and authorization support activities, and directs continuous security monitoring throughout the system lifecycle. Working closely with technical leads, regional teams, and Government stakeholders, this role drives secure implementation, risk-informed decision-making, and enterprise-wide consistency in support of mission-critical capabilities.
- Translate Government security requirements into contractor engineering practices, security acceptance criteria, and reusable control evidence across the enterprise hub, regional teams, and resident command teams.
- Identify and assess risks introduced by data and AI capabilities. Direct threat modeling and security testing covering data and model integrity, unauthorized disclosure, adversarial manipulation, and software supply-chain dependencies.
- Lead Risk Management Framework (RMF) artifact development with Information Systems Security Officers and Security Control Assessor Representatives. Coordinate assessments and prepare evidence supporting authorization to test, connect, and operate.
- Direct implementation and management of continuous integration and continuous delivery (CI/CD) security capabilities supporting DevSecOps. Embed vulnerability detection, automated security testing, and remediation verification into delivery workflows.
- Coordinate with the Data Operations Technical Lead on data protection, access controls, and secure infrastructure, and with the Data Science and Analytics Technical Lead and other task leads on AI-specific risks, experimentation, release readiness, and sustainment.
- Oversee continuous security-control monitoring and risk reassessment. Maintain actionable remediation priorities, control evidence, and security transition information for each supported capability.
- Provide technical direction and coaching to assigned cybersecurity, RMF, and DevSecOps personnel. Work through regional management teams to correct security nonconformance and align local execution with enterprise requirements.
- Report security risks, authorization dependencies, and remediation status to the Program Manager and Government stakeholders. Recommend corrective action and document security concurrence for contractor release reviews.
Minimum QualificationsIt is required that the AI Security and Assurance Technical Lead has the following qualifications:
- A bachelor's or advanced degree in cybersecurity, computer science, information systems, engineering, or a related discipline
- 8 years of progressively responsible experience in cybersecurity, security engineering, or secure digital-capability delivery, including at least three years supporting Department of War or Intelligence Community environments.
- 3 years leading cybersecurity technical teams or workstreams responsible for RMF assessment and authorization and secure software or data-platform delivery.
- Experience securing AI/ML capabilities and automated delivery pipelines in classified, cloud, or tactical-edge environments, including reuse of security controls and evidence across authorized environments.
- Experience applying AI risk-management methods, including the NIST AI Risk Management Framework, to security planning and technical assurance.
- Active TS/SCI clearance and maintain the clearance and access required for the assignment
